$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51.cer File: 0dd86b24-f9b6-4d31-b10b-a3c2264e2b51.cer (raw, json) Hash identifier: pj4q8uRnwjkdya7wsThDetKtz+L57UMuwd3PduJNoAQ= Subject key identifier: B1:B1:5A:8D:37:B2:E2:C7:96:CD:2F:84:DB:A9:89:B5:EE:A7:8F:5E Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584AD2361ADD3B6B31D8C9985FC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 11 Aug 2025 12:49:32 +0000 Certificate not after: Sun 14 Nov 2027 13:49:32 +0000 Subordinate resources: AS: 400256 IP: 195.85.85.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:36:1a:dd:3b:6b:31:d8:c9:98:5f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Aug 11 12:49:32 2025 GMT Not After : Nov 14 13:49:32 2027 GMT Subject: CN=0dd86b24-f9b6-4d31-b10b-a3c2264e2b51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:c0:ab:46:ec:e5:9e:9e:8a:63:9c:bc:e2:01: c7:4c:0f:17:b6:d4:8c:bb:c7:32:0b:f6:67:58:ce: 85:ef:a5:d2:2c:6f:97:60:e3:17:b2:40:d0:96:3a: ef:37:97:89:29:c0:b1:db:f9:8c:b9:74:ce:b3:38: 4f:d1:3f:20:0a:35:a6:ca:d5:5c:9d:5c:5b:f5:a4: d6:97:40:81:ea:67:f4:8a:e9:d6:83:1f:a9:3e:b4: e5:de:c7:84:ff:7f:c5:b9:5e:78:2f:9a:1d:71:18: 26:c8:d7:91:81:e2:2f:c9:05:3d:57:38:74:5c:96: ac:fc:6a:dd:4a:56:7f:60:31:cf:e3:df:51:49:50: 9e:a9:52:09:f9:61:28:71:4a:6d:19:e9:45:7d:28: 14:51:e6:6c:dd:54:e4:ff:ef:5e:71:ea:3f:d1:c4: e0:42:80:8d:ce:cc:81:7d:ff:37:16:d0:b4:51:71: 16:be:3a:c1:14:59:ad:01:dc:69:11:e1:ad:c6:40: 75:bf:55:f1:b5:2f:9b:41:c0:cf:a1:49:ac:63:ce: 7f:66:80:46:65:7c:a8:cf:e8:8e:bd:20:4d:96:4c: 45:44:19:5d:05:81:38:54:67:4a:45:71:c3:b8:58: 5d:60:66:ff:d7:69:f1:82:c3:c6:33:64:0a:e1:72: 26:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:B1:5A:8D:37:B2:E2:C7:96:CD:2F:84:DB:A9:89:B5:EE:A7:8F:5E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 195.85.85.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400256 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:8d:0a:e3:0c:16:67:10:6b:15:37:33:e0:33:fa:45:7e:a9: 9a:2a:90:dc:1b:22:d7:21:d1:00:87:87:57:3d:e4:f1:c5:f1: ae:7b:9d:d3:d8:be:9e:fa:c8:8d:69:e1:12:09:ce:02:57:e5: 7d:6d:4d:fe:dc:ac:e8:03:d2:88:2f:3a:c1:a8:b2:e6:64:c2: bc:72:3c:39:56:f2:2c:91:2d:8c:9e:18:77:f6:b6:45:a2:7b: 1d:cb:5c:1b:4b:8f:d8:41:db:49:8c:ba:ab:f7:e3:c5:c3:06: 84:d2:15:45:58:ca:2e:80:a6:f7:0e:e9:5d:b5:3b:d5:fc:d9: 5e:32:2d:82:b5:0c:f7:17:90:bf:5a:44:3e:5e:ef:6f:9c:ad: 3d:fd:5e:2c:6c:fc:76:77:79:1a:4b:2b:00:98:ca:6c:de:e8: a3:73:19:da:a8:3d:5d:61:6d:84:dc:9c:65:a8:05:9b:a7:88: b6:66:0e:5e:57:a1:99:2f:86:81:3a:6d:76:b6:a6:fa:14:7a: d2:4e:f1:00:7e:77:01:e3:be:42:cc:f7:51:20:1d:32:b4:d6: 7f:c7:ab:c1:0c:72:06:2a:14:1e:98:9b:4d:03:9a:ba:21:c6: cf:57:33:18:f9:01:57:fb:83:17:91:86:26:f6:4b:35:88:03: ea:2d:c5:f9 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWErSNhrdO2sx2MmYX8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDgxMTEyNDkzMloXDTI3MTExNDEzNDkzMlowLzEtMCsGA1UEAxMk MGRkODZiMjQtZjliNi00ZDMxLWIxMGItYTNjMjI2NGUyYjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8CrRuzlnp6KY5y84gHHTA8XttSMu8cyC/Zn WM6F76XSLG+XYOMXskDQljrvN5eJKcCx2/mMuXTOszhP0T8gCjWmytVcnVxb9aTW l0CB6mf0iunWgx+pPrTl3seE/3/FuV54L5odcRgmyNeRgeIvyQU9Vzh0XJas/Grd SlZ/YDHP499RSVCeqVIJ+WEocUptGelFfSgUUeZs3VTk/+9eceo/0cTgQoCNzsyB ff83FtC0UXEWvjrBFFmtAdxpEeGtxkB1v1XxtS+bQcDPoUmsY85/ZoBGZXyoz+iO vSBNlkxFRBldBYE4VGdKRXHDuFhdYGb/12nxgsPGM2QK4XImjQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFLGxWo03suLHls0vhNupibXup49eMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8w ZGQ4NmIyNC1mOWI2LTRkMzEtYjEwYi1hM2MyMjY0ZTJiNTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzBkZDg2YjI0LWY5YjYtNGQzMS1i MTBiLWEzYzIyNjRlMmI1MS8wZGQ4NmIyNC1mOWI2LTRkMzEtYjEwYi1hM2MyMjY0 ZTJiNTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADDVVUwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BhuAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHWNCuMMFmcQaxU3M+Az+kV+qZoqkNwbItch0QCHh1c95PHF 8a57ndPYvp76yI1p4RIJzgJX5X1tTf7crOgD0ogvOsGosuZkwrxyPDlW8iyRLYye GHf2tkWiex3LXBtLj9hB20mMuqv348XDBoTSFUVYyi6ApvcO6V21O9X82V4yLYK1 DPcXkL9aRD5e72+crT39Xixs/HZ3eRpLKwCYymze6KNzGdqoPV1hbYTcnGWoBZun iLZmDl5XoZkvhoE6bXa2pvoUetJO8QB+dwHjvkLM91EgHTK01n/Hq8EMcgYqFB6Y m00Dmrohxs9XMxj5AVf7gxeRhib2SzWIA+otxfk= -----END CERTIFICATE-----Generated at Sat Aug 23 17:47:52 2025 by rpki-client